Open Source Vulnerabilities

code-server

Inefficient Regular Expression Complexity in code-server

org.apache.shiro:shiro-core

Apache Shiro vulnerable to a specially crafted HTTP request causing an authentication bypass

@cookiex/deep

Prototype Pollution in cookiex/deep

@tarojs/helper

Inefficient Regular Expression Complexity in taro

wasmtime, wasmtime

Wrong type for `Linker`-define functions when used across two `Engine`s

wasmtime, wasmtime

Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime

wasmtime, wasmtime

Use after free passing `externref`s to Wasm in Wasmtime

pimcore/pimcore

Observable Response Discrepancy in Lost Password Service

SharpCompress

Partial path traversal in sharpcompress

mitmproxy

Lacking Protection against HTTP Request Smuggling in mitmproxy

zrender, zrender

Prototype Pollution in the merge and clone helper methods

tremor-script

Memory Safety Issue when using patch or merge on state and assign the result back to state

ghost

Remote command injection when using sendmail email transport

mixme

Prototype Pollution in mixme

flask-restx

sqlparse, sqlparse, sqlparse

kubernetes, kubernetes, kubernetes

,

kubernetes, kubernetes, kubernetes

kubernetes, kubernetes, kubernetes

,

kubernetes

CVE-2020-8561 affecting package kubernetes 1.30.10-29

kubernetes

CVE-2021-25740 affecting package kubernetes 1.30.10-29

sqlparse

kubernetes, kubernetes, kubernetes

kubernetes, kubernetes, kubernetes

kubernetes, kubernetes, kubernetes

sqlparse